诊断平台: Microsoft Windows XP Service Pack 2
IE版本: Internet Explorer V7.0.5730.13 Build:75730
计算机物理内存:1023.48MB - 当前可用内存:437.95MB
100 - 未知 - Process: openvpnas.exe [] - E:\hotspot shield\bin\openvpnas.exe
100 - 未知 - Process: QQGame.exe [QQ游戏] - D:\Program Files\Tencent\QQGAME\QQGame.exe
100 - 未知 - Process: QQGameDl.exe [] - D:\Program Files\Tencent\QQGAME\QQGameDl.exe
100 - 未知 - Process: QQMusic.exe [QQ音乐7.1] - D:\Program Files\Tencent\QQ\QQMusic.exe
100 - 未知 - Process: QQ.exe [QQ] - D:\Program Files\Tencent\QQ\QQ.exe
100 - 未知 - Process: TIMPlatform.exe [TIMPlatform] - D:\Program Files\Tencent\QQ\TIMPlatform.exe
100 - 未知 - Process: NewsjRpg.exe [升级角色版] - D:\PROGRA~1\TENCENT\QQGAME\NEWSJRPG\NEWSJRPG.EXE -Embedding
100 - 未知 - Process: jiajiasr.exe [加加输入法 4.01 作者:孙百川] - D:\Program Files\jj4\jiajiasr.exe
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page=http://go.microsoft.com/fwlink/?LinkId=54843
O4 - 未知 - HKLM\..\Run: [SkyTel] [Realtek Voice Manager] SkyTel.EXE
O9 - 未知 - Extra button: 启动迅雷5(HKLM) - d:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - 未知 - Extra button: 番茄花园(HKLM) - http://tomatolei.com
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{D3C13121-6421-4553-7C26-22E81C63183F}]C:\WINDOWS\system32\gamelink.dll
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{D3C13122-6421-4553-7C26-22E81C63183F}]C:\WINDOWS\system32\gamelink.dll
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{D3C13123-6421-4553-7C26-22E81C63183F}]C:\WINDOWS\system32\gamelink.dll
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{D3C13124-6421-4553-7C26-22E81C63183F}]C:\WINDOWS\system32\gamelink.dll
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{4D1391FD-126A-43AA-5FE4-162EF47CD6B9}]C:\WINDOWS\system32\gamelink.dll
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{4D1391FE-126A-43AA-5FE4-162EF47CD6B9}]C:\WINDOWS\system32\gamelink.dll
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{4D1391FF-126A-43AA-5FE4-162EF47CD6B9}]C:\WINDOWS\system32\gamelink.dll
O10 - 未知 - Winsock LSP: [Easy2Game Service Provider] [{4D1391F6-126A-43AA-5FE4-162EF47CD6B9}]C:\WINDOWS\system32\gamelink.dll
O16 - 未知 - DPF: {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} (PhotoDraw) - http://imgcache.qq.com/qzone/cli ... QPhotoDrawSetup.exe
O16 - 未知 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (EditCtrl) - https://img.alipay.com/download/1101/aliedit.cab
O16 - 未知 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (Qzone Media Tools) - http://qz-photo.qq.com/qzone_v4/QzoneMediaTools.cab
O16 - 未知 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (PasswordEditCtrl) - https://password.qq.com/download/qqedit2.cab
O18 - 未知 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - D:\PROGRA~1\KuGoo3\InExtend\KUGOO3~1.OCX
O18 - 未知 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - 未知 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - 未知 - Service: gusvc [Google Updater Service] - "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" - (not running)
O23 - 未知 - Service: HotspotShieldService [Hotspot Shield Service] - E:\hotspot shield\bin\openvpnas.exe - (running)
O23 - 未知 - Service: usnjsvc [Messenger 上安装的启用共享情况的服务] - "C:\Program Files\MSN Messenger\usnsvc.exe" - (not running)
O30 - 未知 - HKLM\..\Winlogon: [UIHost] [Windows Logon UI] "\Program Files\Logonui\Royale.exe"
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: avp.exe [卡巴斯基杀毒软件相关程序。] -
100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe
100 - 安全 - Process: RTHDCPL.exe [瑞昱出品的声卡相关程序。] - C:\WINDOWS\RTHDCPL.EXE
100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\RunDLL32.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\Program Files\360safe\safemon\360tray.exe
100 - 安全 - Process: avp.exe [卡巴斯基杀毒软件相关程序。] -
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\Program Files\360safe\360safe.exe
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://go.microsoft.com/fwlink/?LinkId=69157
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://go.microsoft.com/fwlink/?LinkId=54896
R0 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://go.microsoft.com/fwlink/?LinkId=54896
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://go.microsoft.com/fwlink/?LinkId=69157
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://go.microsoft.com/fwlink/?LinkId=54896
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default)=http://www.google.com/search?q=%s
O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - d:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O4 - 安全 - HKLM\..\Run: [RTHDCPL] [realtek声卡特性设置软件相关程序。] RTHDCPL.EXE
O4 - 安全 - HKLM\..\Run: [Alcmtr] [一款声卡相关程序。] ALCMTR.EXE
O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 安全 - HKLM\..\Run: [NvMediaCenter] [是NVidia显示卡相关文件。] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] D:\Program Files\360safe\safemon\360tray.exe /start
O4 - 安全 - HKLM\..\Run: [AVP] [卡巴斯基杀毒软件相关程序。] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - Startup folder: [QQ游戏启动加速程序.lnk] [qq游戏启动加速相关程序。] C:\Documents and Settings\user\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk
O9 - 安全 - Extra button: 卡巴斯基Web反病毒保护插件(HKLM) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O11 - 安全 - Options Group: International*
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://fpdownload2.macromedia.co ... current/swflash.cab
O23 - 安全 - Service: AVP [卡巴斯基杀毒软件相关程序。] - "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r - (running)
O23 - 安全 - Service: Macromedia Licensing Service [是macromedia公司网页三剑客软件的注册程序。] - "C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe" - (not running)
O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running)
O25 - 安全 - ABOUT: DesktopItemNavigationFailure - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: NavigationCanceled - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: NavigationFailure - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: OfflineInformation - res://ieframe.dll/offcancl.htm
O25 - 安全 - ABOUT: PostNotCached - res://ieframe.dll/repost.htm
O31 - 未知 - Notify: klogon - C:\WINDOWS\system32\klogon.dll - Kaspersky Lab - Logon Visualizer - 6.0.2.621 - 200768 - 2fb94ab158eb54a2212c8087b7e72340
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 121344 - c65af3789883af8a6e5e5405949bdcc6
O31 - 未知 - SEApproved: {68f32140-2ca3-11d0-acc1-444553540000} - C:\Program Files\ACDSee\picaview.dll - ACD Systems, Ltd. - PicaView 系统扩展 DLL - 2.0.0.78 - 487424 - 053432fff82198e62c0162be6c5c60f9
O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11038 - 466944 - c8ea187df8f1cedf34eb5bab8ab38ebf
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11038 - 466944 - c8ea187df8f1cedf34eb5bab8ab38ebf
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11038 - 466944 - c8ea187df8f1cedf34eb5bab8ab38ebf
O31 - 未知 - SEApproved: {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - C:\Program Files\Real\RealPlayer\rpshell.dll - RealNetworks, Inc. - RealPlayer Shell Extensions - 1.0.1.1783 - 49198 - f73cb998b4c7f6050d99822d4150a456
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 121344 - c65af3789883af8a6e5e5405949bdcc6
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
O40 - winlogon.exe - Kaspersky Lab - C:\WINDOWS\system32\klogon.dll - Logon Visualizer - 2fb94ab158eb54a2212c8087b7e72340
O40 - lsass.exe - www.Easy2Game.com - C:\WINDOWS\system32\gamelink.dll - Easy2Game Service Provider - 0cc2826b3b3bf1b99210436d74adbfa0
O40 - svchost.exe - www.Easy2Game.com - C:\WINDOWS\system32\gamelink.dll - Easy2Game Service Provider - 0cc2826b3b3bf1b99210436d74adbfa0
O40 - svchost.exe - www.Easy2Game.com - C:\WINDOWS\system32\gamelink.dll - Easy2Game Service Provider - 0cc2826b3b3bf1b99210436d74adbfa0
O40 - svchost.exe - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll - Script Checker - 632a777961e99cb61b28599555a2f7a7
O40 - svchost.exe - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll - Script Checker AV Plugin - d7e7992479709ff02a33669e5dacf878
O40 - svchost.exe - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prremote.dll - PR_REMOTE - 20be3997fe3f091a3b0d634fb9d62259
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll - Microsoft? C++ Runtime Library - f33a2734000fc6d3dbae2e1337e2bb1f
O40 - svchost.exe - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll - Prague Loader - 22217717571205531e517b62a54fd861
O40 - svchost.exe - www.Easy2Game.com - C:\WINDOWS\system32\gamelink.dll - Easy2Game Service Provider - 0cc2826b3b3bf1b99210436d74adbfa0
O40 - svchost.exe - www.Easy2Game.com - C:\WINDOWS\system32\gamelink.dll - Easy2Game Service Provider - 0cc2826b3b3bf1b99210436d74adbfa0
O40 - Explorer.EXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll - Script Checker - 632a777961e99cb61b28599555a2f7a7
O40 - Explorer.EXE - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - 7df6a9c481cb51565c636d131bd8199e
O40 - Explorer.EXE - - C:\WINDOWS\system32\nvshell.dll - - c8ea187df8f1cedf34eb5bab8ab38ebf
O40 - RunDLL32.exe - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - 7df6a9c481cb51565c636d131bd8199e
O41 - klif - spuper-ptor - C:\WINDOWS\system32\drivers\klif.sys - (running) - spuper-ptor - Kaspersky Lab - 850db2e2e8f6588c6715cea4aa77419c
O41 - sptd - sptd - C:\WINDOWS\system32\drivers\sptd.sys - (running) - - -
O41 - tapvpn - TAP-Win32 Virtual Network Driver - C:\WINDOWS\system32\drivers\tapvpn.sys - (running) - TAP-Win32 Virtual Network Driver - The OpenVPN Project - d426070d86aea0f8e16f9257bda79887
O41 - EagleNT - EagleNT - C:\WINDOWS\system32\drivers\EagleNT.sys - (not running) - - -
O41 - kmsinput - kmsinput - C:\WINDOWS\system32\drivers\kmsinput.sys - (not running) - - - f8d6ebcb50c02b42c5ffd5393229c6b6
O41 - npkcrypt - npkcrypt - C:\WINDOWS\system32\qqedit\npkcrypt.sys - (not running) - - -
O41 - WINIO - WINIO - D:\Program Files\按键游侠\winio.sys - (not running) - - -
360Safe.exe=3.7.0.1005
AntiAdwa.dll=3.6.3.1001
AntiEng.dll=3.6.4.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.1.1021
操作历史报告：
----------清理恶评及系统插件历史----------
2007-03-22 19:16
查杀恶意软件 - Cnnic中文上网 - 危险 -
查杀恶意软件 - 百度超级搜霸 - 危险 -
2007-12-18 15:02
清理恶评软件 - Google工具栏 -
2007-03-22 19:17
插件管理 - 腾讯QQ附带的QQIEHelper插件 -
2007-04-05 21:23
插件管理 - aatievv.exe -
2007-04-05 21:24
插件管理 - 快车(FlashGet) - C:\PROGRA~1\FLASHGET\fgiebar.dll
2007-04-09 17:16
插件管理 - 快车(FlashGet) -
插件管理 - 超级兔子上网精灵 - C:\Documents and Settings\user\桌面\超级兔子上网精灵.lnk
2007-04-12 18:53
插件管理 - 快车(FlashGet) -
2007-05-02 12:34
插件管理 - 零搜 -
2007-10-12 14:21
清理恶评插件 - etcetera toolbar - C:\Program Files\Save
2007-11-11 09:50
清理其它插件 - 开屏播放器 -
2007-11-11 09:50
清理恶评插件 - Cnnic中文上网 - C:\WINDOWS\system32\idnoe.dll
2007-12-18 15:01
清理其它插件 - Google工具栏 - c:\PROGRA~1\google\GOOGLE~3.DLL
2007-12-24 17:42
清理恶评插件 - ctfmom广告程序 - C:\WINDOWS\system32\INSTAL~1.DLL |
[复制链接]
发表于 2008-1-5 14:16:54
楼主
360报告不是很详细。